{"id":1222344,"url":"https://alion.io/job/huskeys-senior-security-researcher","title":"Senior Security Researcher","company":{"id":1962810,"name":"Huskeys","domain":"huskeys.io","url":"https://alion.io/company/huskeys","size_band":"51-200","is_staffing_agency":false,"employer_type":"direct","is_intermediary":false,"listed_via":null,"ats_vendor":"Ashby","truth_index":null},"role":"Security","role_family":"Security","seniority":"senior","employment_type":"full_time","work_mode":"on_site","remote_scope":null,"remote_scope_basis":null,"remote_working_hours":null,"hiring_geo_confidence":"structured","locations":["Tel Aviv, Israel"],"countries":["IL"],"hiring_countries":[],"hiring_countries_total":0,"salary":null,"salary_estimate":{"min_usd":90000,"max_usd":207000,"period":"year","method":"global_role_cell_scaled_by_country","sample_n":2094},"experience_years_min":6,"visa_sponsorship":false,"relocation_package":false,"has_equity":false,"technologies":[{"name":"AI Agents","optional":false},{"name":"Akamai","optional":false},{"name":"AWS","optional":false},{"name":"AWS Lambda","optional":false},{"name":"Azure","optional":false},{"name":"Cloudflare","optional":false},{"name":"Fastly","optional":false},{"name":"PoC Library","optional":false},{"name":"Python","optional":false}],"status":"live","first_seen_at":"2026-09-17T14:30:17Z","employer_posted_date":"2026-10-12","last_verified_at":"2026-10-15T15:58:45Z","board_verified":true,"closed_at":null,"days_open":28,"trust":{"level":"ok","repost_count":null,"flags":[],"days_open":28},"description":"About Huskeys :\nHuskeys is reimagining web application protection for the modern era.\nAs applications become increasingly dynamic, multi-cloud, and AI-driven, traditional WAFs struggle to keep up.\nWe built the first Agentic Network Security Control Plane - an AI-powered mitigation layer that works with any existing WAF. Our platform helps security teams unify protection, measure effectiveness, reduce manual overhead, and create context-aware policies that block threats without disrupting business flows.\nAt Huskeys, we believe context is the new attack surface, and that security should empower the business - not slow it down.\nWhy we need you?\nWe are looking for a Senior Security Researcher to take part of a major piece of that knowledge engine. Not just to execute research well - but to define what's worth investigating, build the methodology to investigate it, and produce output the entire company can stand on. You will go deep on vendor research, actively contribute to shaping the product direction within your domain, and be the kind of researcher who naturally raises the bar for those around them.\nAbout the position:\nAt Huskeys, we are redefining web application protection by building an intelligent platform that sits across multiple WAF vendors (Cloudflare, AWS, Azure, Akamai, Fastly, ByteWaf). In our world, the depth and breadth of our vendor knowledge is our ultimate competitive asset.\nRight now, vendor coverage across the industry is uneven - some ecosystems are deeply understood, while others require structured exploration from scratch. We are looking for a Security Researcher who can dive deep into unexplored vendor terrain, map out behavior, and turn rigorous applied research into meaningful insights.\nNote: This is not a bug-hunting or 0-day chasing role. This is applied research: methodical, thorough, and directly tied to shipping actual value to our enterprise customers.\nWhat Success Looks Like After 6 Months :\nDomain Expert: You are the go-to internal authority on WAF vendors - you've mapped their security control logic, understand where they deviate from standards, and can answer questions about your domain with confidence and depth.\n\nAttack Surface Coverage: You've moved from initial exploration to a comprehensive understanding of your vendors' rule engine behaviors, edge cases, and architectural gaps - with a living coverage model to show for it.\n\nEngineering Enabler: You deliver reproducible PoCs and structured writeups with a clear capability matrix that Platform engineers can take directly into production - no translation layer needed.\n\nKnowledge Anchor: New research questions about your vendor domains get routed to you first. The team knows who to ask.\n\nKey Responsibilities:\nDeep Applied Research\n\nGo beyond surface-level testing - understandwhy vendor security controls behave the way they do, where they deviate from standards, and where those deviations create risk.\n\nValidate & Reproduce - Hands-on validation of security findings across web applications, APIs, and cloud-based WAF environments at the HTTP layer.\n\nAutomation Contribution - Design and continuously optimize our posture and detection playbooks. Own the detection logic for your domain.\n\nBridge the Gap - Build structured writeups and functional PoCs that seamlessly translate research insights into actionable engineering specifications.\n\nCustomer-Centric Research - Conduct occasional hands-on customer research tracks to uncover high-signal findings and real-world attack vectors.\n\nDay-to-day Reality:\nDeep, Focused Work: The majority of your time is spent in independent, focused research - exploring vendor logic, writing test cases, building frameworks, and documenting discoveries.\n\nTeam Alignment: Regular syncs with the Research TL to align on priorities, evolving research agenda, and cross-team dependencies.\n\nZero Solo Silos: You coordinate actively with Platform engineers on PoC handoffs and detection pipelines. You initiate cross-functional sessions in your domain rather than waiting for them.\n\nStructured Pace: Research tracks are owned end-to-end, with breathing room to go deep without constant context-switching.\n\nThe Ideal candidate:\nYou are a methodical researcher - the kind of person who gets genuinely excited about spending a week figuring out exactly how Cloudflare's sequence rules behave under real conditions, or how Lambda@Edge can be wired to enforce security logic at the CDN layer - and coming out the other side with a clear, documented mental model the whole team can build on.\n\nBuilds for Leverage: You consistently ask \"what does this unlock?\" Your outputs are designed to be used - by the product, by engineering, by the team.\n\nOwns the Domain: You develop a point of view on your research area over time, not just individual engagements. You become the authority.\n\nComfort with Ambiguity: A blank slate at the start of a research cycle is your natural habitat. You can scope it, structure it, and drive it to a meaningful answer.\n\nRadical Transparency: You share early, ask sharp questions, and actively raise the quality bar for everyone around you.\n\nMust-Have Requirements\n6+ years as a Security Researcher.\n\nVendor Research Fluency: Proven ability to independently explore a major WAF or cloud security vendor environment (Cloudflare, AWS, Azure, Akamai, etc.) from scratch - mapping rule engine behaviors, identifying gaps, and producing structured findings.\n\nResearch Autonomy: A track record of defining research scope and methodology from an open-ended brief, not just executing on predefined tasks.\n\nHTTP and API Familiarity: Comfortable working at the HTTP layer - enough to understand how WAF controls interact with real traffic patterns.\n\nOutput Quality: Demonstrated ability to produce high-leverage research artifacts: methodologies and frameworks that others build on, not just per-project findings.\n\nScripting Skills: Proficiency in Python (or equivalent) to automate test cases and build lightweight research tooling.\n\nCommunication: Strong written communication - clean, clear, and actionable findings that engineers and product can act on directly.","description_format":"text","description_chars":6144,"description_truncated":false,"requirements":{"experience_years_min":6,"management_years_min":null,"team_size_min":null,"manages_managers":false,"education":null,"security_clearance":false,"languages":[]},"benefits":[],"hiring_locations":[],"hiring_excludes":[],"relocation_offered":false,"industries":["Network Security","Enterprise Networks"],"lifecycle":[{"event":"open","at":"2026-09-25T12:34:06Z"}],"visa":[],"liveness":{"score":59,"band":"ok","label":"Likely open","p_open":1,"p_active":0.792,"p_room":0.75,"age_days":27,"expected_fill_days":38,"reasons":["conf:1","velocity","win:late"],"computed_at":"2026-10-15T05:46:00Z"},"pay":null,"html_url":"https://alion.io/job/huskeys-senior-security-researcher","json_url":"https://alion.io/job/huskeys-senior-security-researcher.json","meta":{"generated_at":"2026-10-15T16:53:49Z","cache_seconds":300,"methodology":"https://alion.io/methodology","terms":"https://alion.io/terms","contact":"https://alion.io/contact","api":"https://alion.io/developers","about":"Alion is a live layer of people, companies and AI agents: who they are, whether they are real and active right now, what they do and how to work with them, readable by people and by agents and paid per call.","catalog":"https://alion.io/catalog.json","usage":{"tier":"crawler_verified","counted_by":"address","units_charged":1,"used_today":25624,"day_limit":null,"remaining_today":null,"minute_limit":300,"resets_at":"2026-10-16T00:00:00Z"}},"offers":[{"id":"company.slices","title":"One company in depth, by slice","status":"live","price":{"credits":0.02,"usd":0.002,"plus_per_slice":{"credits":0.05,"usd":0.005}},"unit":"per company, plus each slice with data","note":"the employer in depth","call":{"mcp_tool":"get_company","arguments":{"id":1962810},"rest":"https://alion.io/mcp/rest/get_company?id=1962810"},"human":"https://alion.io/catalog?offer=company.slices&for=job%2Fhuskeys-senior-security-researcher"},{"id":"market.stats","title":"A market slice: pay, demand and time to fill","status":"live","price":{"credits":1,"usd":0.1},"unit":"per slice","note":"pay, demand and time to fill for this role and place","call":{"mcp_tool":"market_stats"},"human":"https://alion.io/catalog?offer=market.stats&for=job%2Fhuskeys-senior-security-researcher"},{"id":"job.search","title":"Open jobs by role, technology, place, pay and visa","status":"live","price":{"credits":0.02,"usd":0.002},"unit":"per posting in a list","note":"similar open postings","call":{"mcp_tool":"search_jobs"},"human":"https://alion.io/catalog?offer=job.search&for=job%2Fhuskeys-senior-security-researcher"},{"id":"company.verify","title":"Is this company real and active right now","status":"pilot","price":null,"unit":"per company","request":{"url":"https://alion.io/catalog/request","method":"POST","body":"{\"offer\": \"company.verify\", \"for\": \"job/huskeys-senior-security-researcher\", \"note\": \"what you need it for\"}"},"human":"https://alion.io/catalog?offer=company.verify&for=job%2Fhuskeys-senior-security-researcher"}]}